Information on data processing
This privacy policy applies to data processing by SV Werder Bremen GmbH & Co KG aA, Sport-Verein ‘Werder’ v. 1899 e.V, Werder Bremen Merchandising GmbH and Werder Bremen Payment GmbH (WERDER). Below, we provide you with information in accordance with Articles 13 and 14 of the GDPR in order to fulfil the information obligations stipulated therein when collecting personal data.
1. Name and contact details of the controller and the data protection officer
Controller:
SV Werder Bremen GmbH & Co KG aA
Franz-Böhmert-Straße 1c., 28205 Bremen
Tel.: (0421) 43 45 90 / Fax: (0421) 49 35 55
E-Mail: info@werder.de
The data protection officer of the controller is:
Lawyer Bertold Frick, Datenschutz-Metropol GmbH Baumwollbörse
Wachtstraße 17/24, 28195 Bremen
Tel.: (0421) 339 53 50 / Fax: (0421) 339 53 55
2. Collection and storage of personal data, as well as the nature and purpose of its use
In the course of our business dealings with you, we may collect the following information:
Surname, first name
Date of birth
A valid email address
Address (private or business)
Telephone number (landline and/or mobile)
Payment details
For season tickets: card number, cardholder
This data is collected,
to identify you as our member, customer or fan;
to initiate a contract with you;
to perform the services arising from the contractual relationship with you;
to administer your membership;
to correspond with you;
to evaluate user behaviour in the case of season ticket holders;
to send our newsletters;
for invoicing/payment;
to fulfil your claims or to assert any claims against you.
Data processing is necessary for the purposes specified in Art. 6(1)(b) GDPR for the proper processing of orders and for the mutual fulfilment of obligations arising from the respective contract. Data processing may also be necessary to fulfil a legal obligation to which we are subject, Art. 6(1)(c) GDPR.
Data processing may also be carried out on the basis of your consent in accordance with Art. 6(1)(a) GDPR. If this is the case, you have the right to withdraw your consent at any time, freely and without giving reasons, by sending an email to datenschutzbeauftragter@werder.de. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. Data processing by us or third parties may also be carried out on the basis of Art. 6 (1) (f) GDPR in our legitimate interest or in the legitimate interest of the third party. The legitimate interest consists in the evaluation and improvement of our services, increasing economic efficiency, protecting data through uniform processing and communicating with you.
The personal data collected by us for the purpose of membership or a business relationship will be stored until the expiry of the statutory retention period and then deleted, unless we are obliged to store it for a longer period in accordance with Art. 6 (1) (c) GDPR due to, for example, tax and commercial law retention and documentation obligations (from the German Commercial Code or Fiscal Code) or you have consented to further storage in accordance with Art. 6 (1) (a) GDPR.
In order to determine any pre-emptive rights for season ticket holders, we digitally record, on the basis of our legitimate interests, whether the season ticket is used to attend a home match, without at the same time processing any information about the persons using the ticket. The data is stored for a period of up to three months after the end of the season in question for verification purposes and then anonymised or deleted for statistical purposes.
3. Transfer of data to third parties
Your personal data will not be transferred to third parties for purposes other than those listed below. Insofar as this is necessary for the processing of contractual relationships with you in accordance with Art. 6 (1) (b) GDPR, your personal data will be transferred to third parties. This includes, in particular, the transfer to
Service providers for conducting sales in the online shop (payment systems, shipping and logistics service providers)
Service providers for sending letter mail
Service providers for sending newsletters
Service providers for conducting competitions
Service providers for the sale and dispatch of tickets
Service providers for the provision of IT services
Service providers for debt collection
Public authorities and courts for the purpose of asserting any claims or enforcing house/stadium rules.
The data passed on may only be used by the third party for the purposes specified.
4. Rights of data subjects
You have the right:
pursuant to Art. 7(3) GDPR, to withdraw your consent from us at any time. As a result, we will no longer be permitted to continue processing data based on this consent in the future;
pursuant to Art. 15 GDPR, to request information about your personal data processed by us. In particular, you may request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, deletion, restriction of processing or objection, the existence of a right of appeal, the origin of your data if it was not collected by us, and the existence of automated decision-making, including profiling and, where applicable, meaningful information about its details;
pursuant to Art. 16 GDPR, to request the immediate correction of inaccurate or incomplete personal data stored by us;
pursuant to Art. 17 GDPR, to request the erasure of your personal data stored by us, unless processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defence of legal claims;
pursuant to Art. 18 GDPR, to request the restriction of the processing of your personal data if you dispute the accuracy of the data, the processing is unlawful but you oppose its erasure and we no longer need the data, but you need it for the establishment, exercise or defend legal claims, or you have objected to the processing pursuant to Art. 21 GDPR;
pursuant to Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request its transfer to another controller, and pursuant to Art. 77 GDPR, to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our place of business for this purpose.
5. Right to object
If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 (1) (f) GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR, provided that there are reasons for this arising from your particular situation. If you wish to exercise your right to object, simply send an email to datenschutzbeauftragter@werder.de.
We will then no longer process the personal data concerning you, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
6. Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data concerning you infringes the GDPR. The supervisory authority to which the complaint has been lodged shall inform you of the status and outcome of the complaint, including the possibility of a judicial remedy under Article 78 of the GDPR.
7. Contact details for the State Data Protection Commissioner
The State Commissioner for the Free Hanseatic City of Bremen within the meaning of Section 40 BDSG (Federal Data Protection Act)
Arndtstr. 1, 27570 Bremerhaven
Telephone: (0421) 361 20 10 / Fax: (0421) 496 18 495
E-Mail: office@datenschutz.bremen.de
Version 4.0, Bremen, March 2025
)